Discovering Cryptographic Weaknesses with Claude(anthropic.com)
221 points by gslin 19 hours ago | 163 comments
tl;dr: Anthropic researchers used Claude Mythos Preview to discover new cryptographic attacks: one that halves the effective key strength of HAWK (a NIST post-quantum signature candidate) and another that speeds up attacks on 7-round AES by 200-800×. Neither affects production systems—HAWK isn't deployed and the AES attack only works on a reduced-round variant—but the results demonstrate that frontier LLMs can now perform novel cryptanalysis at expert-researcher level, with each discovery costing roughly $100,000 in API usage.
HN Discussion:
  • Anthropic's casual/messy prompts show that elaborate prompt engineering is overrated
  • The results are significant because prior expert effort had 'hardened' these problems, making novel attacks impressive
  • The $100k cost and human validation hours suggest poor ROI compared to funding human researchers
  • ~The article overstates the significance since attacks don't affect deployed systems and are only marginal improvements
  • National security and disclosure implications of AI-discovered crypto vulnerabilities are worth serious consideration